kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Thu Jan 24 03:12:54 PST 2019

OpenBSD/amd64 (ci-openbsd-setuid-9.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts.
2019/01/24 03:13:09 parsed 1 programs
2019/01/24 03:13:16 executed programs: 0
login: Thread 0xffff800020b92bd0 exiting with the following locks held:

exclusive rrwlock inode r = 0 (0xfffffd806c1dd818) locked @ /syzkaller/managers/setuid/kernel/sys/ufs/ufs/ufs_vnops.c:1547

panic: Thread 0xffff800020b92bd0 cannot exit while holding sleeplocks


Stopped at      db_enter+0x18:  addq    $0x8,%rsp

    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND

  10923  34859      0         0x2      0x480    1  syz-executor1

*228503  60997      0     0x14000      0x200    0  reaper

db_enter() at db_enter+0x18

panic() at panic+0x16c

witness_thread_exit(37530971dfcc38ae) at witness_thread_exit+0x244

reaper(0) at reaper+0x14f

end trace frame: 0x0, count: 11

https://www.openbsd.org/ddb.html describes the minimum info required in bug

reports.  Insufficient info makes it difficult to find and fix bugs.

ddb{0}> 

ddb{0}> set $lines = 0

ddb{0}> show panic

Thread 0xffff800020b92bd0 cannot exit while holding sleeplocks


ddb{0}> trace

db_enter() at db_enter+0x18

panic() at panic+0x16c

witness_thread_exit(37530971dfcc38ae) at witness_thread_exit+0x244

reaper(0) at reaper+0x14f

end trace frame: 0x0, count: -4

ddb{0}> show registers

rdi                                0

rsi                              0x1

rbp               0xffff800020b673d0

rbx               0xffff800020b67470

rdx               0xffffffff81ec577a    cmd0646_9_tim_udma+0x16395

rcx                            0x201

rax                              0x1

r8                0xffffffff81788154    kprintf+0x174

r9                               0x1

r10               0x48f78ee6edb2a303

r11               0xa339bb86623064e0

r12                     0x3000000008

r13               0xffff800020b673e0

r14                            0x100

r15                              0x1

rip               0xffffffff81107618    db_enter+0x18

cs                               0x8

rflags                         0x246

rsp               0xffff800020b673c0

ss                              0x10

db_enter+0x18:  addq    $0x8,%rsp

ddb{0}>